Team:Hamburg/Practices/Risks
Risk Assessment
What is QSEC?
- Web based Risk Management tool
- Developed in cooperation with WMC company leading supplier of integrated information security management systems
Why adapt an IT security tool to a research project at a laboratory?
QSEC Biosafety gives you the possibility to evaluate each process of your research project by linking it to the used assets and information. Each risk concerning the integrity of the process itself and the person performing it, giving you a full risk report by classifying risk in categories A (high), B (middle) and C (low). You also have the option to integrate a legal directive and link them to your processes and assets to easy check of all are correctly executed.
Exemplary implementation
- Organize your project in individual processes
- Rate criticality of each process considering confidentiality, integrity, availability
- Link required assets to each process
- Rate the assets criticality considering confidentiality, integrity, and availability
- Determine threats and vulnerabilities and rate them
- Get full risk report about your A,B and C risks
Perspective
This method gives you a detailed overview of all your potential risks within biological research and allows you evaluate and manage them. This could be of special interest if you planning a research project in for example the field of molecular virology, where the exposure to dangerous biological material is omnipresent. In addition to the shown aspects of the software you can add measurements to each risks in the next step and keep track of your improvement in implementing these. A big advantage as well is the function to integrate a legal directive. We for example included the ‘Directive 2000/54/EC of the European parliament on the protection of workers from risks related to exposure to biological agents at work’. This method can be customised to each research project in an individual lab and allows you to improve biosafety to an big extant as well as saving potential cots due to damage and loss of data.